$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json) Hash identifier: tjiNNxKZcr9J0FnghOZdLDECJYc1iml1W6jFaD3irKU= Subject key identifier: 44:C5:E5:9E:13:44:25:F6:93:45:A8:68:90:B0:80:C3:2D:DD:66:E9 Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft Manifest number: 5E Signing time: Mon 01 Jun 2026 08:57:06 +0000 Manifest this update: Mon 01 Jun 2026 08:57:05 +0000 Manifest next update: Mon 08 Jun 2026 08:57:05 +0000 Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: ZkPHrftKIAj5gPoa08b3vAuW+8HnokUipKB8ZGt4M0g=) 2: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=) 3: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D Validity Not Before: Jun 1 08:57:05 2026 GMT Not After : Jun 8 08:57:05 2026 GMT Subject: CN=6a1d4961-f545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:59:a0:24:24:99:86:a3:c2:e4:66:78:ce: f9:6d:2c:2e:42:04:b7:6b:34:df:fb:dc:23:61:ca: 15:55:96:ab:6e:2f:c1:75:11:9e:7e:77:43:87:5c: 9e:08:7c:f2:03:59:a4:b7:41:fa:34:7f:46:ec:da: d7:7f:a6:4c:a3:1b:2c:0e:2c:41:8d:c6:de:2a:a1: a0:99:b1:c1:ed:2c:29:e0:60:85:bf:e5:86:63:87: d6:0c:bc:42:8d:12:b7:68:4a:20:68:ce:f3:84:d6: 6b:89:3c:5e:af:02:0b:45:f1:ce:7e:8d:67:e5:94: fd:fc:90:bb:0f:b6:36:58:2e:16:d3:91:46:db:88: ba:05:fb:9a:5b:b7:46:fe:1f:c4:60:ab:b2:c0:d3: dc:b8:62:4b:4c:b1:ab:4e:b3:e7:25:e1:b4:1a:f4: 1c:e1:7c:01:e0:5a:66:08:ea:3c:41:90:cd:57:7e: 6c:03:ac:41:5b:f5:b1:7b:99:ce:0d:03:82:cc:8a: b9:7f:3e:2e:7d:61:b8:3c:1c:10:87:13:2c:a3:37: 5f:fe:99:87:25:7e:e5:65:a8:21:ca:f3:5b:b4:2b: 82:77:97:02:cc:e5:e6:64:dc:65:bd:51:26:51:01: 56:00:60:c0:bb:ea:21:a8:63:86:88:63:67:6a:9b: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:E5:9E:13:44:25:F6:93:45:A8:68:90:B0:80:C3:2D:DD:66:E9 X509v3 Authority Key Identifier: keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:fb:5f:b3:f5:aa:ce:a2:ff:69:25:5c:52:2c:9e:f9:56:9c: 24:2c:e3:3d:0d:2b:41:21:3b:d0:2b:0d:d6:79:75:3a:22:ea: db:d8:4a:5d:95:09:6b:aa:95:6f:14:42:65:3d:d3:a0:01:63: 9c:72:af:d9:69:02:36:4d:b0:fa:b5:83:07:08:cf:c8:15:a0: 83:d2:61:d2:de:c0:dd:2a:b3:fe:87:3a:b4:eb:87:89:d4:94: fc:89:47:3c:2d:ce:8c:a3:d3:c3:37:57:ac:50:cd:d4:91:21: ca:f9:21:75:00:7d:02:a6:15:78:b9:54:02:cc:d9:b4:75:3e: b1:89:13:ae:e5:24:52:f6:2a:cc:54:13:a6:a7:9b:68:e1:83: 3c:c3:89:ec:f7:37:a6:f1:63:b0:b0:30:cd:25:b9:99:1e:e9: 66:a5:54:e2:5c:ac:5c:46:b5:87:3a:f7:0c:c1:53:3b:59:59: 53:3a:52:51:a0:19:8f:6a:53:23:10:ca:95:2a:b5:d6:6e:39: ab:ea:bd:60:14:04:bb:4b:8c:2a:b5:39:e1:55:9d:5b:c3:c6: 96:d1:c5:40:1e:34:c4:cd:f4:41:77:66:a1:f1:e1:4d:42:75: 36:44:b9:34:d8:2d:56:a8:3f:06:25:a1:b7:f6:28:d1:68:79: 90:50:f4:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTlDQzExMC8GA1UEBRMoMUIzNjgzNTI1OTQ0Nzc0Mzg4ODUzMDkwRDEwMDVCQjUx NTUyMjQ2RDAeFw0yNjA2MDEwODU3MDVaFw0yNjA2MDgwODU3MDVaMBgxFjAUBgNV BAMTDTZhMWQ0OTYxLWY1NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCew1mgJCSZhqPC5GZ4zvltLC5CBLdrNN/73CNhyhVVlqtuL8F1EZ5+d0OHXJ4I fPIDWaS3Qfo0f0bs2td/pkyjGywOLEGNxt4qoaCZscHtLCngYIW/5YZjh9YMvEKN ErdoSiBozvOE1muJPF6vAgtF8c5+jWfllP38kLsPtjZYLhbTkUbbiLoF+5pbt0b+ H8Rgq7LA09y4YktMsatOs+cl4bQa9BzhfAHgWmYI6jxBkM1XfmwDrEFb9bF7mc4N A4LMirl/Pi59Ybg8HBCHEyyjN1/+mYclfuVlqCHK81u0K4J3lwLM5eZk3GW9USZR AVYAYMC76iGoY4aIY2dqm4sdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURMXlnhNE JfaTRahokLCAwy3dZukwHwYDVR0jBBgwFoAUGzaDUllEd0OIhTCQ0QBbtRVSJG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOUNDLzk5MTRCOEU0REEx RjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBPSWhUQ1EwUUJidFJWU0pH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR3phRFVsbEVkME9JaFRDUTBRQmJ0UlZTSkcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OUNDLzk5MTRCOEU0REExRjExRjBBQjgyMEZGNzg0RDM2NDFEL0d6YURVbGxFZDBP SWhUQ1EwUUJidFJWU0pHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCu+1+z9arOov9pJVxSLJ75VpwkLOM9DStBITvQKw3WeXU6Iurb2EpdlQlrqpVv FEJlPdOgAWOccq/ZaQI2TbD6tYMHCM/IFaCD0mHS3sDdKrP+hzq064eJ1JT8iUc8 Lc6Mo9PDN1esUM3UkSHK+SF1AH0CphV4uVQCzNm0dT6xiROu5SRS9irMVBOmp5to 4YM8w4ns9zem8WOwsDDNJbmZHulmpVTiXKxcRrWHOvcMwVM7WVlTOlJRoBmPalMj EMqVKrXWbjmr6r1gFAS7S4wqtTnhVZ1bw8aW0cVAHjTEzfRBd2ah8eFNQnU2RLk0 2C1WqD8GJaG39ijRaHmQUPT4 -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:11 2026 by rpki-client